A completeness result for the simply typed 

A/i-calculus 



Karim NOUR & Khelifa SABER 

LAMA - Equipe LIMD 
Universite de Chambery 
73376 Le Bourget du Lac 
e-mail : {knour@univ-savoic.fr ksabcr@mcsscl.cnisc.fr} 

Abstract 

In this paper, we define a realizability semantics for the simply typed Xjj,- 
calculus. We show that if a term is typable, then it inhabits the interpretation 
of its type. This result serves to give characterizations of the computational 
behavior of some closed typed terms. We also prove a completeness result of 
our realizability semantics using a particular term model. 

1 Introduction 

What came to be called the Curry-Howard correspondence has proven to be a 
robust technique to study proofs of intuitionistic logic, since it exhibits the structural 
bond between this logic and the A-calculus. T. Griffin's works [7] in 1990 allowed to 
extend this correspondence to classical logic, which had several consequences. On 
basis of this new contribution, the A/x-calculus was introduced by M. Parigot [19] 
and [20]. The A/^-calculus is a natural extension of the A-calculus which exactly 
captures the algorithmic content of proofs written in the second order classical 
natural deduction system. The typed A/x-calculus enjoys all good properties: the 
subject reduction, the strong normalization and confluence theorems. 

The strong normalization theorem of second order classical natural deduction 
[20] is based on a lemma known as the correctness result, which stipulates that 
each term is in the interpretation of its type. This is also based on the notion of 
the semantics of realizability. The idea of this semantics consists in associating to 
each type a set of terms that realizes it, this method has been very effective for 
establishing the strong normalization of type system "a la Tait and Girard". J.- Y. 
Girard used it to give a proof of the strong normalization of his system JT, method 
known also as the reducibility candidates, later M. Parigot extended this method 
to the classical case and provided a proof of strong normalization of the typed Xfi- 
calculus. In a previous work [16], we adapted Parigot's method and established a 
short semantical proof of the strong normalization of classical natural deduction 
with disjunction as primitive. 

In general all the known semantical proofs of strong normalization use a vari- 
ant of the reducibility candidates based on a correctness result, which has been 
important also for characterizing computational behavior of some typed terms, as 
it was done in J.-L. Krivine's works [12]. This inspired us also to define a general 
semantics for classical natural deduction in [15] and gave such characterizations. 

The question that we now can ask is: "does the correctness result have a con- 
verse?" . By this we mean: "can we find a class of types for which the converse of 
the correctness result (completeness result) holds?". J.R. Hindley was the first who 
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study the completeness of simple type systems [8], [9] and [10]. R. Labib-sami 
has established in [14] completeness for a class of types in Girard's system T known 
as strictely positive types, and this for a semantics based on sets stable under fir]- 
equivalence. S. Farkh and K. Nour revisited this result, and generalized it, in fact 
they proved a refined result by indicating that weak- head-expansion is sufficient [4] . 
In [5], they established an other completeness result for a class of types in Krivine's 
system AT2. Recently, F. Kamareddine and K. Nour improved the result of Hindley, 
to a system with an intersection type. Independently, T. Coquand established in 
[1] by methods using Kripke's models, the completeness for the simply typed A- 
calculus. 

In the present work we deal with this problem and prove the completeness for 
the simply typed A/i-calculus. The semantics that we define here is not completely 
different from that of [15] and [16], nevertheless we add a slight but an indispensable 
modification to the notion of the /i-saturation. This semantics is inspired by the 
strong normalization proof of Parigot's A/x-calculus, which consists in rewriting each 
reducibility candidate as a double orthogonal. 

The correcteness result allows to describe the computational behavior of closed 
typed terms. We have two kinds of proofs for such characterizations. Semantical 
proofs, in which we guess the computational behaviors, models used in such proofs 
are exactly built to meet the required characterization. Syntactical proofs, where 
we construct the behavior based on the type, these proofs are shorter than the 
semantical ones. In what follows, we give at each time, both of semantics and 
syntactical proofs. 

This paper is organized as follows. Section 2 is an introduction to the simply 
typed A/i-calculus. In section 3, we define the semantics and prove its correct- 
ness. Section 4 is devoted to the completeness result. Finally, in Section 5 we give 
characterizations of some closed typed terms. 

2 The simply typed A/i-calculus 

In this work, we use the A/i-calculus a la De Groote, where the binder /i and the 
naming construct are split. This allows more expressivity than the Parigot's original 
version. 

Definition 2.1 1. Let X and A he two infinite sets of disjoint alphabets for 
distinguiching X-variables and fjL-variahles. The Xfi-terms are given by the 
following grammar: 

T —X I XX. T \{TT)\ fiA.T \ {A T) 

2. Types are formulas of the propositional logic built from the infinite set of 
propositional variables V = {X, Y, Z, ...} and a constant of type _L, using the 
connective — >. 

3. As usual we denote by -^A the formula A — >_L. Let Ai,A2, ...,An,A be types, 
we denote the type Ai — > {A2 (... (An A)...)) by Ai, A2, An — ^ A. 

4-. Proofs are presented in natural deduction system with two conclusions, such 
that formulas in the lefi-hand-side of h are indexed by X-variables and those 
in right-hand- side of\- are indexed by ^-variables, except one which is indexed 
by a term. 
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5. Let t he a Xfi-term, A a type, T ~ {xi : Ai}i<i<n o,nd A = {aj : -Bj}i<j<m7 
using the following rules, we will define "t typed with type A in the contexts 
r and A" and we denote it T \- t : A ; A. 

: -ax for I < i < n. 

r h a;, : A, ; A " " 

r,x: A\-t: B-A Thu:A^B;A T h v : A; A 

r h Xx.t : A~^ B;A~'' T h {u v) : B; A 

T \- t ■.±;A,a : A T \- t : A; A, a : A ^ 

r h fia.t : A; A ^ T \- {a t) :±; A,a : A 

We denote this typed system by S*^. 

6. The basic reduction rules are (3 and fi reductions. 

• {Xx.u v) t>i3 u[x := v] 

• {fia.u v) t>n fia.u[a :=* v] 

where u[a :=* v] is obtained from u by replacing inductively each subterm 
in the form (a w) in u by (a {w v)). 

7. We denote ti>t' if t is reduced to t' by one of the rules given above. As usual 
>* denotes the reflexive transitive closure of >, and ~ the equivalence relation 
induced by >* . 

We have the foUowing results (for more details, see [20]). 

Theorem 2.1 (Confluence result) Ift>*ti andtt>*t2, then there exists such 
that ti >* t^ and t2 >* 

Theorem 2.2 (Subject reduction) IfVht: A;A andt>* t' then T \- t' : A; A. 

Theorem 2.3 (Strong normalization) If T h t : A; A, then t is strongly nor- 
malizable. 

Definition 2.2 1. Let t be a term and v a finite sequence of terms {the empty 
sequence is denoted by 0), then, the term tv is defined by (t 9) ^ t and 
(t uu) = {{t u) li). 

2. Let t,ui, ...,Un be terms and vi, Vm finite sequences of terms, then 

t[{xi := Ui)i<i<n; {oj :=* Vj)i<j<m] is obtained from the term t by replac- 
ing inductively each Xi by Ui and each subterm in the form (cLj u) in t by 
{a J {uvj)). 

Remark 2.1 In order to avoid the heavy notation of the substitution 

[{xi := Ui)i<i<n', {ttj :=* Vj)i<:j<m], we denote it by a (which is not an object of the 

syntax). Then t[{xi :— Wi)i<i<,i; (oj :—* Vj)i<j<m] is denoted by ta. 

Lemma 2.1 Let t, t' be terms and a a substitution, ift>* t' , then, ta >* t'a. 

Proof. By induction on t. ■ 



3 



3 The semantics of S, 



In this part we define the realizability semantics and prove its correctness. 

Definition 3.1 1. We say that a set of terms S is saturated when the condi- 
tions: V >* u and u G S imply v G S for all terms u and v. 

2. Let us take a saturated set of terms S and a set C of an infinite classical 
variables {^-variables). We say that S is C-saturated when the condition: 
t dz S implies fia.t G S and (a i) € 5 for all term t and all ^.-variable a G C 

Remark 3.1 The difference between this semantics and those defined in [15] and 
[16], is the notion of the C-saturation which is not necessary for the correctness part, 
but indispensable for the completeness side. It is obvious that this notion introduces 
ill-typed terms, thing which seems to go against completeness. Nevertheless, the key 
point is that C is a parameter attached to a particular model, therefore when we take 
the intersection of all models, all these bad terms are removed. This is exaclty what 
is done in the proof of the theorem ^.1. 

Definition 3.2 1. Consider two sets of terms K. and C, we define a new set of 
terms: IC C = {t / (t u) £ C, for each u € /C}. It is clear that when C is a 
saturated set, then K, C is also saturated one. 

2. We denote T \J A by T' and T'^^ the set of finite sequences of elements of 
T . Let t be a term and tt G T'^", then the term (t tt) is defined by {t 0) = t, 
it tt) = ((t u) tt') if tt ~ utt' and (t tt) = {{a t) tt') if tt ~ ott' . 

3. Let S be a set of terms and XC_ T'^'^ , then we define X-^ S = {t / {t tt) a S, 
for each tt G X}. 

Remark 3.2 The fact that the application (at) is denoted by (ta) is not something 
new, it is already present in Saurin's work [23], Except that for us, it is a simple 
notation in order to uniformize the definition of the application. But for Saurin, it 
is crucial to obtain the separation theorem in the Xfi-calculus. 

Definition 3.3 Let S be a C-saturated set and {TZi}iizj subsets of terms such that 
Ti-i ~ -^TZ^ ~^ S for some X-jz^ C T'^". A model M={C,S, {Il-i}iei) is the smallest 
set containing S and TZi, and closed under the constructor 

Lemma 3.1 Let M = {C,S, {Ti-iliei) be a model and Q E A4. There exists a set 
Xg C T'^'^ such that Q ~ Xg S. 

Proof. By induction on Q. 

- Ug^S, take Xg = {0}. 

- Ug = 7^,, take Xg = A^,. 

- If g = gi g2, then, by induction hypothesis, = '%'c/2 ~^ ^ where Xg.^ C 
T'^^ , and take Xg = {uv / m G ^/i and v G Xg^}. 
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Definition 3.4 Let A4 = (C,5, {TZi}i(=i) be a model and Q e AA. We define the 
set ^\J{Xg / g = Xg-^S}. 

Lemma 3.2 Let M = {C,S, {Tlijiei) be a model andQ eM. We have g = 
S. 

Proof. Immediate. ■ 

Definition 3.5 L Let A4 = {C,S,{TZi}i^j) be a model. An M. -interpretation 
I is an application X i-^ from the set of propositional variables V in M 

which we extend for any formula as follows: 

• I{±) = S 

• I{A B) = J{A) X{B). 

2. For any type A, we denote \A\j^/[= P|{X(A) / 1 an M-interpretation} . 

3. For any type A, \A\ = C\{\Mm /Ma model}. 

The notion of C-saturation is indispensable for completeness but, as we said 
in the remark 3.1, it provides ill-terms. The presence of such terms has some 
drawbacks on the correctness side, hence we introduce in the following definition a 
parameterized relation 

Definition 3.6 Let u, v be two terms. The expression u v means that v is 
obtained from u by replacing the free classical variables of u by some others in C, 
i.e, if we denote u fey ^[ai, a^] where the a,; are the free classical variables of u, 
then v will be u[oi := fei, a„ :~ 6„] where bi ^ bj for {i /= j) and bi £ C for each 
1 < i < n (it is obvious that parameterized by C). 

Lemma 3.3 (Correctness) Let T = {xi : Ai}i<i<n, A = {aj : -Bj}i<j<m, Ai = 
{C,S,{TZi}i^i) a model, X an M -interpretation, Ui G T{Ai), Vj G {I{Bj))^ , 
a — \(xi Mi)i<i<n; (flj Vj)i<j<m], o,nd u,v two terms such that u v. If 
r h li : A ; A, then, va G X{A). 

Proof. By induction on the derivation, we consider the last used rule. 

ax: In this case u ~ Xi — v and A = Ai, then va = Ui G X{A). 

-^i: In this case u = Xx.ui and A = B C such that r,x : B 'r ui : C ; A. 
Then v = Xx.vi and ui vi. Let w G X(B) and S ^ a + [x :~ w], 
by induction hypothesis, viS G I{C), hence {Xx.via w) G 1{C), therefore 
Xx.vicj G I{B) I{C). Finally va G J{A). 

In this case u = {ui U2), F h ui : _B ^4 ; A and F h W2 : B ; A. We also 
have v = (vi V2) where ui 1^1 a-nd U2 >c ^'2- By induction hypothesis. 
Via G X{B) ^ X{A) and V2a G 1{B), therefore {via V2a) G liA), this implies 
that va G T{A). 

ji: In this case u = ^a.ui, then v = ^ib.vi where ui vi and 6 is a new 
variable which belongs to C and not free in wi (there is always such variable 
because C is infinite). Let v G {2{A))-^ and 5 = a + \b ;=* v]. By induction 
hypothesis, vi5 G S, and by the definition of 5, wc have, fib.viS G S. Since 
{pb.via v) >* fib.viS, then, fib.via G I{A), i.e, va G X{A). 

_L: In this case u = {a ui), then, v = (b vi) where ui vi such that the free 
variable a was replaced by h in ui and b ^ Fv{ui) is new variable which belongs 
to C. Let 5 = a+[b :=* v] where v G {I{A))-^ , by induction hypothesis, vi5 G 
X(A), hence {vi5 v) G S. Therefore, by the definition of S, {b {vi6 v)) G S, 
finally va G S. 
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Corollary 3.1 Let A be a type and t a closed term. If \- t : A, then, t G \A\. 

Proof. Let Ai he a. model and 2 an A^-interpretation. Since h t : A, then, by 
the lemma 3.3, t G 2{A). This is true for any model A4 and for any Al-interpretation 
/, therefore t e ■ 



4 The completeness result 

Roughly speaking, completeness of the semantics amounts to saying that if t is 
in the interpretation of a type A, then t has the type A. In order to prove the 
completeness result, we construct in the following part a particular term model. 

Definition 4.1 {and notation) 

1. Let U, = {xi / « G N} U {flj / j G N} he an enumeration of infinite sets of X 
and ^-variables. 

2. Let Qi = {Ai / i G N} be an enumeration of all types where each type comes 
infinitely many times. 

3. Let ^2 = {Bj / i G N} he an enumeration of all types where the type _L comes 
infinitely many times. 

4. We define G ^ {xi : Ai / i e N} and D = {aj : Bj / j G N}. 

5. Let u be a term, such that Fv{u) C the contexts Gu {resp D„) are defined 
as the restrictions of G {resp D) at the declarations containing the variables 
of Fv{u). 

6. The notation G h u : C; D means that G„ h u : C; Du, we denote G h* li : 
C; O iff there exists a term u' , such that u >* u' and G h m' : C; D. 

7. Let C = {oj / {oj : ±) G B} and § = {t / G h* i :±; D}. 

8. For each propositional variable X , we define a set of terms Mx = {t / G h* 
t : X: B}. 

Lemma 4.1 1. S is a <C-saturated set. 

2. The sets Rx are saturated. 

3. For each propositional variable X , Mx — {oj / {o-j '■ X) G B} §. 
^. M = (C,§, (Mx)xe-p) « "^o^e/ 

Proof. Easy. ■ 

Remark 4.1 Observe that the model M is parameterized by the two infinite sets 
of vai^iables and the enumerations, we need just these infinite sets of variables and 
not all the variables. This is an important remark since it will serve us in the proof 
of the theorem ^.1. 

Definition 4.2 We define the M.- interpretation I as follows: 

• I(_L) =§. 

• II(^) = Rx for each propositional variable. 
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Lemma 4.2 Let y be a X-variable, a ~ \(xi :~ y)i<i<n-, (ij ■—* y)i<j<m] o, sub- 
stitution and t a term. 

1. If {ta y) is normalizable, then t is normalizable. 

2. If ta is normalizable, then t is normalizable. 

Proof. By a simultaneous induction on t, we use the standardization theorem 
of the A/^-calculus [21]. 

1. We examine the case where t = Xx.u. Then {ta y) = {Xx.ua y) is nor- 
maUzable, this impUes that ua[x := y] is normahzable. hence by (2), u is 
normahzable, therefore t is normahzable too. 

2. We examine the case where t = {au). Then ta ~ {a {ua y)) is normalizable, 
this implies that {ua y) is normalizable, hence by (1), u is normalizable, 
therefore t is normalizable too. 



Corollary 4.1 Let t by a term and y a X-variable. If {t y) is normalizable, then, 
t is also normalizable. 

Proof. Immediate from the previous lemma. I 

Lemma 4.3 Let t and t be two normal terms, y a X-variable such that y ^ 
Fv{t), {t y)t>*T, A andB types, andr,y : A\- t : B; A. Then T \- t : A ^ B; A. 

Proof. See the appendix. ■ 

Lemma 4.4 Let A be a type and t a term. 

1. //G h* t : ^ ;D, then t e I(^). 

2. Ifte 1{A), then G t:A;D. 

Proof. By a simultaneous induction on the type A. 
Proof of (1) 

1. If A ^ X or _L, the result is immediate from the definition of I. 

2. Let A = B ^ C and G h* t : A ;E1), then t>*t' such that: G h t' : B ^ C ;B. 
Let u G I(-B). By induction hypothesis (2), we have G \-* u : B -,3, this 
implies that w >* u' and G \- u' : B ; ID. Hence G h {f u') : C ; D, so, by 
the fact that {t u) \>* {t' u'), we have G h* (t li) : C ; D, then, by induction 
hypothesis (1), {t u) G 1(C). Therefore t ^1{B C). 

Proof of (2) 

1. If ^ = X or _L, the result is immediate from the definition of I. 

2. Let A = B ^ C, t G 1{B) ^ 1(C) and y be a A- variable such y ^ Fv{t) 
and {y : B) E G. We have y : B \- y : B, hence, by induction hypothesis (1), 
y G 1{B), then, {t y) G 1(C). By induction hypothesis (2), G h* (< y) : C ; D, 
then {t y) >* t' such that G h : C ;D and, by the corollary 4.1, f is a 
normalizable term. The normal form of t can be either {x ui) U2...Un either 
Xx.u or /ia.w (the case (a u) gives a contradiction for typing reasons). 
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(a) If t>* (x ui) U2...Un with Ui normal terms, then G h (x ui) U2...u„t/ 
X : Ei,E2,...,En ^ (B ^ C) e G, G h and G h y 

Therefore G h (x m) U2...m„ : B ^ C ;D, finally G ^* t : B - 



C 
B 
C 



(b) If t >* Aa;.u where u is a normal term, then, since G contains an infinite 
number of declarations for each type, let y be a A-variable such that 
{y : B) e G and y ^ Fv{u). We have {t y) >* u[x :== y] and G h u[x 

y] : C ;D, hence G h Ay.ii[a; := y] : B ^ C ]M and, by the fact that 
y ^ Fv{u), Xy.u[x := y] = Aa;.u. Therefore G h Ax.u : — > C ;D, 
finally G h* i : B ^ C ;D. 

(c) If t >* iia.u where u is a normal term, then let y be a A-variable such that 
{y : B) G G and y ^ Fv{u). We have (t y)>* ^a.u[a :=* y] >* ^la.u' where 
u' is the normal form of u[a :=* y], so we have G ,y : B \- fia.u' : C ; D. 
By the lemma 4.3, we obtain G h jia.u : B ^ C ;D, finally G h* t : 
B ^ C ;D. 



Theorem 4.1 Let ^ 6e a type and t a term. We have t G \A\ iff there exists a 
closed term t' such that 1 1>* t' and 'r t' : A. 

Proof. By the lemma 3.3. 

We consider an infinite set of A and variables such that it contains none 
of the free variables of t, then from this set we build the completeness model as 
described in the definition 4.1. If t G then t S 1(^4), hence by (1) of the lemma 
4.4 and by the fact that Fv{t') C Fv{t), we have 1 1>* t' and ^ t' : A. ■ 

Corollary 4.2 Let A he a type and t a term. 

1. If t Cz \A\, then t is normalizahle. 

2. If t Cz \A\, then there exists a closed term t' such that t ~t' . 

3. \A\ is closed under equivalence. 

Proof. (1) and (2) are direct consequences of theorem 4.1. (3) can be deduced 
from the theorem 4.1 and the lemma 3.3. I 

5 Characterization of some typed terms 

We begin by adding to our system new propositional constants to obtain a new 
parameterized typed system. In such systems we can characterize the syntactical 
form of a term having some type, this will be useful for the proof of the lemma 5.3. 
This part is inspired by Nour's works [17] and [18]. 

5.1 The system S^'^ 

Definition 5.1 Let O ~ Oi, ...,0„ be a sequence of fresh propositional constants. 
L A type A is said an 0-type iff A is obtained by the following rules: 

• Each Oi is an O-type. 

• If B is an O-type, then, A B is an O-type. 

2. The typed system S^^'^ is the system 5^ at which we add the following condi- 
tions: 
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• The rules ax is replaced by 



r Xi : Ai ; A 

where A does not contain declarations of the form a : C such that C is 
an O-type. 

• The rules — >e is replaced by 

r \-Q u : A ^ B;A T w : A; A 
r ho {u v): B;A 

where B is not an O-type. 

Remark 5.1 It is obvious that S^J^ can be seen as the system where the syntax 
of formulas is extended by the new constants O and some restrictions are imposed 
on the typing rules. Therefore in the remainder of this work we consider that, any 
typed term in the system S^'~' is strongly normalizable. 

Lemma 5.1 If T \- t : A ; A, X a propositional variable and F is not an O-type, 
then r ho t : A[X :== F] ; A. 

Proof. By induction on the derivation. ■ 

The following lemma stipulates that the new system 5*^*^ is closed under reduc- 
tion (subject reduction). 

Lemma 5.2 IfT\-Qt:A;A and t>*t', then T\-Qt' : A;A 

Proof. By induction on the length of the reduction t>* t' . It suffices to check 
this result for t>i3t' and tt>^t' . We process by induction on t. ■ 

Lemma 5.3 Let V = {xi : Ai}i<i<„, A = {oj : Bj}i<j<rii O = Oi,...,Ok and 
1 < I < k. IfT ho t : Oi ; A, then, t ~ Xj for some I < j < n and Aj = Oi. 

Proof. By induction on the derivation. 

ax: Then, F h : Aj] A, hence t = Xj and Oi = Aj. 

—^i'. A contradiction because this implies that Oi is not atomic. 

-^f,: This implies that t ~ [u v), then, F h u ; A ^ O;; A, therefore this gives a 
contradiction with the restriction on the rule -^^ since Oi is an O-type. 

(x: Then, t = /la.ti and F h ti ;±; A', a : Oi, where A = A' U {a : Oi}, therefore 
this gives a contradiction with the fact that A does not contain declarations 
of the form aj : Oj . 

_L: A contradiction because Oi is different from ±. 



Now we give some applications of the lemma 3.3. We will see that the operational 
behavior of a typed term depends in "certain sense" only of its type. 

Definition 5.2 Let t be a term. We denote Alt the smallest set containing t such 
that: if u G Mt and a £ A, then fia.u G Mt and (a u) G Mt. Each element of Mt is 
denoted fi.t. For example, the term ^a.fj,b.{a {b (fic.{a fj,d.t)))) is denoted by fi.t. 
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5.2 Terms of type ±^ X 

Example 5.1 Let ei = Xx.^a.x and 62 = Xx.fj.b.(b fia.x), we have: 
h e,; :_L-> X. 

Given a X-variable x, and a finite sequence of X-variables y, we have: 

• (ei x) y >* ^a.x 

• (e2 x) y >* fib.{b fia.x) 

The operational behavior of closed terms with the type ±— > X is given in the 
following theorem. 

Theorem 5.1 Let e be a closed term of type _L— > X , then, for each X-variable x 
and for each finite sequence of X-variables y, (e a;) y >* ji.x 

Proof. 

Semantical proof: 

Let X be a A-variable and y a finite sequence of A-variables. Let C = A, take 
S = {t / tt>* fi.x} and TZ = {y} S. It is clear that S is C-saturated set and x G 5. 
So let A4 = (C, S, TZ) and take T the interpretation which at X associates X{X) = TZ. 
By the lemma 3.3, e £ Z(_L— > X), then, e G S TZ, i.e, e G 5 ({y} 5), there- 
fore (e x) e {y} iS, and (e x) y G S. Finally (e y >* //.x. 

Syntactical proof: 

We can also give a syntactical proof of this result. Let O ~ Oi,...,0„ be a 
sequence of new constants, A ~ Oi, 0„ _L and y ~ yi--.yn a sequence of A- 
variables. By the lemma 5.1, e :_L— > A, then, x :_L, (y^ : Oj;)i<i<Ti ("^ ■-'-j 
hence (e a;)y [>* r. It suffices to prove that, if r is a normal term and x : _L, (y^ : 
Oi)i<i<n l~o T : ± ; {bj : _L)i<j<m, then r — ^.x. This can be proved easily by 
induction on t. ■ 

Corollary 5.1 Let e be a closed term of type (-L— > X), then, for each term u and 
for each v £ , (eu) v >* fi.u 

Proof. Immediate from the previous theorem and the lemma 2.1. ■ 

Remark 5.2 Let h e : ± — > X , the term (e u) modelizes an instruction like 
exit(M) (exit is to be understood as in the C programming language). Ln the reduc- 
tion of a term, if the subterm (e u) appears in head position {the term has the form 
((e u) v)), then, after some reductions, the sequence v is deleted, and we obtain fi.u 
as result. 

5.3 Terms of type {^X ^ X) ^ X 

Example 5.2 Let the terms Ei ~ Xx.fia.{a (x Xz.{a z))) 
and E2 ~ Xx.fia.{a {x {Xzi.{a{x Az2.(a zi)))))), 
we have: h : (-.X X) X . 

Given X-variables x,zi,Z2 and a finite sequence of X-variables y, we have: 

• {El x) y t>* fia.{a {{x 9i) y)) and {61 zi) >* (a (zi y)), where 9i ~ Xz.{a {z y)). 

• {E2 x) y>* na.{a{{x 9i) y)), {0i zi)>* {a {{x 6*2) y)), and {02 2:2) >* (a {zi y)), 
where 0i = Xzi.{a {{x Xz2.{a (zi y))) y)) and 02 = Xz2.{a (zi y)). 

The following theorem describes the computational behavior of closed terms 
with type {^X X) ^ X. 
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Theorem 5.2 Let E be a closed term of type {-'X X) X , then, for each 
X-variable x, for each finite sequence of X-variables y and for each sequence of X- 
variables such that: x, yj are difjerents from any Zi. There exist m G N* 

and terms 6i, ...,9m, such that we have: 

• {E x)yt>* ^.{x 9i) y 

• {Ok Zk) >* 0fe+i) y for all 1 < k < m — 1 

• {Om Zrn) >* lJ--{zi y) for somc 1 < I < m 
Proof. 

Semantical proof: 

Let x be a A-variable, y a finite sequence of A-variables and (zi)^^^. a se- 
quence of A-variables as in the theorem above. Take S = {t /Vr > 0: Either 
[3m > 1, 36*1, ...,6*™, 3j: t >* ^.{{x 9i)y), {Ok Zk+r) >* fi.Hx Ok+i) y) for every 
I < k < m — I and ^m+r) l-i--{zj y)], or [3j : t >* ^.{zj y)\}, take also 
n = {y} -^S. 

It is clear that 5 is a /x-saturated set. Let M = {A, S, TZ) and an A^-interpretation 
/ such that I{X) = TZ. By the corollary 3.1, E € [{TZ S) TZ] {{y} S). 
Let us check that x £ {TZ S) TZ. For this, we take £ {TZ S) and wc prove 
that {x 0) S TZ, i.e, {{x 9) y) e S. By the definition of S, {zr y) & S for each r > 0, 
hence Zr € TZ. Therefore {0 Zr) £ S, so we have Vr' > 0: 

1. Either 3m > I, 36*1, 6*™, 3j : 

. {Ozr) >* fi.{{x9i)y) 

• {Ok Zk+r') >* ^J.■{{x Ok+i) y) for every l<k<m-l 

• {Om Zm+r') >* M-l^j V) ■ 

More generally, since this holds for any r' , take r' = r + 1, then, 
3m > 1, 39i, ...,9m, 3j : 

• {ezr) >* li.{{x9i)y) 

• {Ok Zk+i+r) >* [£.{{x 9k+i) y) for every 1 < < to - 1 

• {Om Zm+l+r) >* l£-{zjy). 

Therefore take to' = to -|- 1, and the terms 0[ = 9, = 9i, ...,9'mj^i = ^m, 
hence check easily that we have for any fixed r: 

3m' >l,39[,...,9'„,,33: 

• {{x 9) y) >* fi.{{x 0[) y) 
. {0[ Zr) t>* ii.{{x 9'^) y) 

• {O'l^ Zk+r) >* IJ--{{x ^^fc+i) y) for every 1 < fc < to' — 1 

• {O'm' Zr„'+r) >* l£-{zjy). 

2. Or 3j : {9 Zr) t>* ^.(z^ y), then {{x 9) y) >* ^.{{x 0[) y) and {9[ Zr) •>* ^.{zj y) 
with to' = 1 and"^i = 9. Therefore {{xO)y)£S). 

Thus ((a; 0) y) £ S which implies that {{Ex)y) S <S. By the fact that is a 
closed term, the A-variable x and the sequence y are different from each Zi, one can 
ensure that the assertion \3j : {{Ex) y) \>* iJ,.{zj y)] can not hold. Then for r — 0, 
3to > 1, 301, 9,n, 3j such that: 
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. {{Ex)y) t>* li.{{x9,)y) 

• {Ok Zk) 0* ii.{{x9k+i)v) for every 1 < fc < m - 1 

• {0,n Zm) o* fJ,.{zj y) for some 1 < j < m. 
Syntactical proof: 

Now we give a syntactical proof of this result. Let O = Oi,...,0„ be new 
constants, A = Oi,...,0„ — > _L and y = yi-.-yn a sequence of variables. By the 
lemma 5.1 I-q E : {-^A A) ^ A, then, x : -^A — > A, {yi : Oi)i<i<„ (_B xjy : ±. 
Therefore, (T x)y >* r, where r is a normal term and x : -^A — > A, (y^ : Oi)i<i<„ 
T : 1. 

Following the form of r we have only one case to examine, the others give always 
contradictions. This case is r = ^..[x Ui) ti...tn where C/i, i„ are normal 
terms, x : -lA — > A, (yi : Oi)i<i<„ I~q Ui : -lA ; [bj : ±)i<j;<m and for all 1 < fc < n, 
X : ^A A, {yi : Oi)i<j<n tk ■ Ok ; {bj : ±)i<j<m- We deduce, by the lemma 
5.3, that, for all 1 < fc < n, tk = yk- 

We prove, by induction and using the lemma 5.3, that if a; : -^A A, {yi : 
Ot)i<i<n, {zk ■ A)i<k<i-i l~o Ui : -^A ; {bj : _L)i<j<m, then 



{Ui Zi) >* Ui+x)y and x : ^A A, {yi : Oi)i<i<„, {zk ■ A)i<k<i Ui+i ■ 



The sequence {Ui)i>i is not infinite, else the term [[E Xx.^a.{x z))y) is not normal- 
izable, which is impossible, since 

X : -^A, z : A, {yi : Oi)i<j<n {{^ Xx.^ia.{x z))y) : ±. ■ 

Corollary 5.2 Let E he a closed term of type {^X X) X , then, for each 
term u, for each sequence w S T^" and for each sequence (wi)ieN* of terms. There 
exist m G N and terms 9i, 9^ such that we have: 

• {E u)w >* fi.{u 9i) w 

• {9i Vi) >* fi.{u w for all 1 < i < m ^ 1 

• {9jn Vjn) O* II. {vi w) for some I < i < m 

Proof. Immediate from the previous theorem and the lemma 2.1. ■ 

Remark 5.3 In the C programming language, there exist "escape" instructions 
which allow to manage errors without stopping the program. These are set jmp and 
longjmp. If we reduce {Ei\y.h)w, we obtain fia.{a{h[y := 9i]w)). When 9 is 
executed with some value v, the environment is restored and we get {a.{vw)). In 
other words, in the term {Ei Xy.h), Ei plays the role of the set jmp instruction and 
occurences of the variables y in h are the longjmp instruction. The corollary 5.2 
says that every term of type {-'X X) — > X has the same operational behavior of 
El but often in several steps {the sequence of9i). 

6 Future work 

Through this work, we have seen that the propositional types of the system S*^ are 
complete for the semantics defined previously. 




or 

3.7 : (1 < i < i), such that : {Ui Zi) >* fJ-.Zjy 
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1. What about the types of the second order typed A/x-calculus? We know 
that, for the system T , the V^-types (types with positive quantifiers) are 
complete for a reahzabihty semantics (sec [4] and [14]). But for the clas- 
sical system we cannot generalize this result. We check easily that, if 
t = fj.a.{a XyiXzfib.{a Xy2Xx.z)) and A = yY{Y \/X{X X)}, then 
t € \A\, but t does not have the type A. This is due to the presence of V 
in right-hand-side of hence, we need to add more restrictions on the posi- 
tions of V in the V^-types to obtain a smallest class of type that we suppose 
can be proved complete. 

2. The problem is not the same when we consider the prepositional classical 
natural deduction system with the connectives A and V. In previous works 
[15] and [16], we define interpretations of A and V according to the functional 
constructors X and Y respectively as follows: 

• IC X C = {t e T / {tTTi) e K. and (ivra) G C} 

• /C Y £ = {t G T / for each u, v if (for each r G IC, s <E C : u[x r] G S 
and v[y :~ s] G 5), then [t [x.u, y.v]) G S} 

These interpretations allow to obtain a correctness result. We can easily 
check that the term fia.(a {fib. (a (Xx.x, fic.{b Xy.Xz.z))), Xx.x)) belongs to the 
interpretation of the type A — {X — > X) A (X X) but it does not have 
the type A. The treatment of the disjunction is even a delicate matter, so we 
think that to circumventing this difficulties, and if we hope a completeness 
theorem, some deep modifications should be brought to our semantics. 

Acknowledgements: We wish to thank R. Matthes and P. De Groote for 
helpful discussions. 

7 Appendix 

This part is devoted to the proof of the lemma 4.3. 

Notation 7.1 Let y he a X-variable. The expression u>py v {resp u^^^y v) means 
that we reduce in u only a (3 {resp fi)-redex where y is the argument, i.e, a redex in 
the form [Xz.u y) [resp (fib.u y)). We denote by >y the union of>py and >^y and 
>* {resp >^y, >^j,) the transitive and reflexive closure of>y {resp >f3y, >p,y)- 

Lemma 7.1 Lett be a normal term, a = [(a^ :=* y)i<i<n\ and t the normal form 
of ta, then, ta >* r. 

Proof. By induction on the normal term i, the important case is the one where 
t — {oi u) and u a normal term, the others are direct consequences of induction 
hypothesis. Let us examine the different forms of the normal term u, here there are 
two important subcases u = Xx.v and u = fib.v with v a normal term (these are the 
two cases where there is creation of redexes after substitution). 

1. Ifu = Xx.v, then, ua ~ Xx.vcr andta = {oi {Xx.va y))>i3y{ai v{a+[x := y]}). 
By induction hypothesis, va >* v' where v' is the normal form of va, hence 
(fli v{(T + [x := J/]}) >* {oi v'[x :~ y]) which is the normal form of ta. 

2. If M = /jb.v, then, ua = fib.va and ta = (a; {fib.va y)) o^y {oi fib.v{a + [b :=* 
y]}). By induction hypothesis, v{a + [b :=* y]} is normalizable only with >* 
reductions, therefore ta is also normalizable only by >* reductions. 



13 



Lemma 7.2 Let t be a normal term, r the normal form of t[a :—* y] and A, B 
two types. //r,y : A h T : B; A. Then T , y : A \- t[a ■.^* y] : B]A. 

Proof. By induction on the length of the reduction t[a :=* y] >* r. By the 
lemma 7.1, it sufBces to prove the following lemma. I 

Lemma 7.3 Let t be a normal term, t a term and A, B two types. Lft>py r {resp 
t \>f_,y t) and r , y : A h r : B ; A then T , y : A h t : B ; A. 

Proof. By induction on t, we examine how t \>py r (resp t >py r). The proof is 
similar to the proof of (2) of the lemma 4.4. ■ 

Lemma 7.4 Lett be a normal term, y a X-variable such thaty ^ Fv(t), a = [a :=* 
y] and A, B, C types. IfT,y:A\-ta:B;A,a:C, then, T \- t : B ; A, a : A ^ C . 

Proof. By induction on t. 

1. t ^ (xui) U2...Un, then, ta = {x uia) U2<J-..Un<y and T ,y : A\- (x uiu) U2<J-.. 
Un<J : B ;A,a : C. Therefore x : Ei,...,En — > B g F and T,y : A\- Uia : 
Ei] A, a : C. By induction hypothesis, we have T h ma : Ei] A, a : A — > C, 
hence F h (a; ui) U2...u„ : B ; A, a : A C . 

2. t = \x.u, then, ta = Xx.ua and T ,y : A h- Xx.ua : B; A, a : C, this implies 
that B = F G and T ,y : A,x : F \- ua : G; A,a : C. By induction 
hypothesis, T , x : F \- u : G; A, a : A —> C , then, F h- Xx.u : F G; A,a : 
A^G, therefore F h Xx.u : B; A,a : A ^ G. 

3. t — fib.u, then, ta — fib.ua and T ,y : A \- fib.ua : B ; A, a : C, this implies 
that T,y : A \- ua -.1. ; A, a : C,b : B. By induction hypothesis. F h u :± 
; A, a : A -> C, 6 : B, therefore F h fib.u : B ; A, a : A C . 

4. t — {a u), then ta = (a (ua y)) and T,y : A\- (a {ua y)) :1. ;A,a : C, 
this implies that T ,y : A V- {ua y) : C \ A, a : G and F , y : A V- ua : A — » 
C ; A, a : C. By induction hypothesis, F h~ u : A ^ C ; A,a : A ^ C, 
therefore F h (a u) :_L ; A, a : A ^ C. 

5. t ~ {b u), then, ta = {b ua) and T ,y : A \- (b ua) :1- ;A,a : C, this 
implies that T ,y : A \~ ua : G ; A,b : G,a : C. By induction hypothesis, 
F hu:G;A,b:G,a:A-^G, therefore F h (6 m) :_L ; A, a : C. 

■ 

Proof.[of lemma 4.3] By induction on t, the cases where t = {x ui) U2...u„ 
and t = Xx.u are similar to those in the proof of (2) of the lemma 4.4. Let us 
examine the case where t = fia.u, then [t y) >* fia.u[a :~* y] >* fia.u' = r where 
u! is the normal form of u\a :=* y\. We have F , y : A h fia.u! : B; A, then F , y : 
A h It' :±; A,a : B. By the lemma 7.1, u\a :=* y] >* u! , then, by the lemma 7.2, 
F , y : A h M[a :=* y] :_L; A, a : B. Hence by the lemma 7.4, F h u :_L; A, a : A ^ B 
finally F h fia.u : A B; A. U 

References 

[1] T. Coquand Completeness theorem and X-calculus. The 7th International 
Conference, TLCA 2005, Nara, Japan, April 21-23, 2005, pp. 1-9, volume 
3461/2005. 



14 



[2] R. David and K. Nour. A short proof of the strong normalization of the simply 
typed Xfi-calculus. Schcdac Informaticac vol 12. pp. 27-33, 2003. 

[3] R. David. Une preuve simple de resultats classiques en X-calcul. Comptc Rendu 
de I'Academie des Sciences. Paris, Tome 320, Serie 1, pp. 1401-1406, 1995. 

[4] S. Farkh and K. Nour. Un resultat de completude pour les types du systeme 
T. CRAS. Paris 326, Serie I, pp. 275-279, 1998. 

[5] S. Farkh and K. Nour. Types Complets dans une extension du systeme AJ-2. 
Informatiquc Thcorique et Application, 31-6, pp. 513-537, 1998. 

[6] J.-Y. Girard, Y. Lafont, P. Taylor. Proofs and types. Cambridge University 
Press, 1986. 

[7] T. Griffin. A formulae- as-types notion of control. Proc. POLP, 1990. 

[8] J. R. Hindley. The simple semantics for Coppe-Dezani- Salle types. Proceeding 
of the 5th Colloquium on International Symposium on Programming, pp. 212- 
226, April 06-08, 1982. 

[9] J. R. Hindley. The completeness theorem for typing X-terms. Theoretical Com- 
puter Science, 22(1), pp. 1-17, 1983. 

[10] J. R. Hindley. Curry's type-rules are complete with respect to the F-semantics 
too. Theoretical Computer Science, 22, pp. 127-133, 1983. 

[11] F. Kamareddine and K. Nour. A completeness result for a realizability seman- 
tics for an intersection type system. Annals of Pure and Applied Logic, vol 146, 
pp. 180-198, 2007 

[12] J.-L. Krivine. Lambda calcul, types et modeles. Masson, Paris, 1990. 

[13] J.-L. Krivine. Operateurs de mise en memoire et traduction de Godel. Archive 
for Mathematical Logic, vol 30, pp. 241-267, 1990. 

[14] R. Labib-Sami. Typer avec (ou sans) types auxiliaires. Manuscrit, 1986. 

[15] K. Nour and K. Saber. A Semantics of Realizability for the Classical Proposi- 
tional Natural Deduction. Electronic Notes in Theoretical Computer Science, 
vol 140, pp. 31-39, 2005. 

[16] K. Nour and K. Saber. A semantical proof of strong normalization theorem for 
full propositional classical natural deduction. Archive for Mathematical Logic, 
vol 45, pp. 357-364, 2005. 

[17] K. Nour. Operateurs de mise en memoire et types V-positifs. Theoretical Infor- 
matics and Applications, vol 30, n 3, pp. 261-293, 1996. 

[18] K. Nour. Mixed Logic and Storage Operators. Archive for Mathematical Logic, 
vol 39, pp. 261-280, 2000. 

[19] M. Parigot Xfi-calculus: An algorithm interpretation of classical natural de- 
duction. Lecture Notes in Artificial Intelligence, vol 624, pp. 190-201. Springer 
Verlag, 1992. 

[20] M. Parigot. Proofs of strong normalization for second order classical natural 
deduction. Journal of Symbolic Logic, vol 62 (4), pp. 1461-1479, 1997. 

[21] W. Py. Confluence en Xfi-calcul. PhD thesis. University of Chambery, 1998. 



15 



[22] K. Saber. Etude d'un X-calcul issu d'une logique classique PhD Thesis, Univer- 
sity of Chambcry, 2007. 

[23] A. Saurin. Separation and the Xfi-calculus. Proceedings of the Twentieth An- 
nual IEEE Symp. on Logic in Computer Science, LICS 2005, IEEE Computer 
Society Press, pp. 356-365, 2005. 

[24] W. W. Tait, A realizability interpretation of the theory of species. In : R. 
Parikh (Ed.), Logic Colloquium Boston 1971/72, vol. 435 of Lecture Notes in 
Mathematics, Springer Verlag, pp. 240-251, 1975. 



16 



